News:

Bored?  Looking to kill some time?  Want to chat with other SMF users?  Join us in IRC chat or Discord

Main Menu
Additional Info
Type
Package ID
Jon_Stovell:SpoofDetector
First Created
May 02, 2022, 02:26:49 PM
Last Updated
October 16, 2022, 01:42:54 PM

Spoof Detector v1.0 Hooks only

Detects and prevents the use of Unicode character spoofing to cause mischief.
Compatible With 2.1.1, 2.1.2
Latest version v1.0
Downloads 96
Reviews 0
Rating 0/5
Subscribers 1
License MIT License (View License)
Author(s)
Screenshots
Spoof Detector

A modification for SMF 2.1 that detects and prevents the use of Unicode character spoofing to cause mischief.

There are two main features of Spoof Detector:

  • It ensures character spoofing cannot be used to create visually confusable names. For example, if a member named "Bob" (Latin letter o) exists, this mod will prevent another member from using the name "Bοb" (Greek letter omicron).
  • It detects and prevent attempts to bypass the word censor via character spoofing. For example, if "quack" (Latin letter a) is censored, also censor "quack" (Cyrillic letter a).

Spoof Detector uses the Unicode Consortium's official list of "confusable characters" to detect spoofing attempts.


Settings

Before the mod will take effect, the admin must go to Administration Center ► Modification Settings ► Spoof Detector and run the Build Spoof Detector Lists task. This will download the latest version of the "confusable characters" list and use it to build and store a list of visually unambigous versions of members' display names.

Once that step has been completed, the following settings can be used:

  • Detect character spoofing in members' display names
  • Detect character spoofing in the word censor


Notes

  • Already existing member names are not affected by this mod. So if "Bob" and "Bοb" both already exist on your forum, they will both be able to continue using their current display names unchanged. The new rules will affect them only when one of them tries to change their display name.
  • Detecting character spoofing in the word censor may sometimes cause words to be censored incorrectly. For example, if the word "bum" is censored, the word "burn" might also be caught by the word censor, because "m" and "rn" are considered to be confusable in the Unicode Consortium's official list. To prevent a word from being censored incorrectly, just add another entry in the word censor to replace the word with itself (e.g.: "burn" => "burn").


License

Spoof Detector is released under the MIT License. A full copy of this license is included in the package file.


Changelog

Version 1.0:
  • Initial release
SpoofDetector.tar.gz
56.69 KB v1.0 2.1.2
Manual installation info
You have to register or login to be able to leave a review
There are currently no reviews on this customization
Advertisement: